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In the Drawings: 

Please replace the drawing sheets as originally filed with the replacement drawing sheets 
attached herewith. Also attached is a set of annotated sheets showing the following changes: 

In Figure 1 A, the CPU element (previously 1 18) in the POLICY MANAGER SERVER has 
been renumbered 146. 

In Figure 3A, element 332 (previously named "QUERY API") has been renamed 
"APPLICATION GUARD INTERFACE." 

In Figure 4, the COMMUNICATION INTERFACE element (previously 434) has been 
renumbered 460. The OPTIMIZER element (previously 436) has been renumbered 462. The 
DIFFER element (previously 438) has been renumbered 464. 

Applicant respectfully submits that the proposed amendments to the drawings are being 
provided to correct various informalities in the drawings as originally filed, and that no new matter 
is being added. 



-2- 

Attomey Docket No.: BEAS-01453US3 

JGeringson/wp/BEAS/1453/us3/beas.01453us3.response.050305.wpd 



Application No.: 10/017,368 
Response to OA dated: May 3, 2005 
Response dated: November 3, 2005 



Remarks 

The above Amendments and these Remarks are in reply to the Office Action mailed May 3, 
2005. A Petition for Extension of Time is submitted herewith, together with the appropriate fee. 

I. Summary of Examiner's Rejections 

Prior to the Office Action mailed May 3, 2005, Claims 1-18 and 34-35 (which have been 
renumbered by Examiner as 19-20) were pending in the Application. In the Office Action, the 
Drawings were objected to as containing various informalities. Claims 2, 8, 11, and 17 were 
rejected under 35 U.S.C. 112, second paragraph, as being indefinite for failing to particularly point 
out and distinctly claim the subject matter that applicant regards as the invention. Claims 1-3, 5, 
7-8, 10-12, 14, 16-17, 19 and 20 were rejected under 35 U.S.C. 102(b) as being anticipated by 
Carter (Alan R. Carter, "Windows NT 4.0 MCSE Study Guide," 1997, ISBN: 0764530879), Claims 
4, 9, 1 3 and 1 8 were rejected under 35 U.S.C. 1 03(a) as being unpatentable over Carter in view of 
the Microsoft Press reference {Microsoft Press Computer Dictionary, 3"^ Edition, ISBN: 
157231446XA, 1997). Claims6and 15were rejected under35U.S.C. 103(a) as being unpatentable 
over Carter. 

II. Summary of Applicant's Amendment 

The present Response amends Figures 1 A, 3A and 4, and also amends the Specification 
and 1 , 2. 3, 7. 8, 1 0, 1 1 , 1 6. 1 7, 1 9 and 20, leaving for the Examiner's present consideration Claims 
1-20. Reconsideration of the Application, as amended, is respectfully requested. Applicant 
respectfully reserves the right to prosecute any originally presented or canceled claims in a 
continuing or future application. 

III. Drawing s 

In the Office Action mailed May 3, 2005, the Drawings were objected to as containing various 
infomialities. Accordingly, Applicant is submitting together with this Response a set of replacement 
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drawing sheets for Figures 1 A, 3A and 4, and requests that the original drawing sheets be replaced 
with those attached herewith. Applicant respectfully submits that the proposed amendment 
addresses only informalities in the Drawings as originally filed, and that no new matter is being 
added. 

IV. Specification 

In the Office Action mailed May 3, 2005, the Examiner noted that several objects shown in 
the Drawings, including objects 464, 516 and 518 in the Drawings were not referenced in the 
specification. Accordingly, Applicant has amended the specification to include references to the 
specified objects. Applicant respectfully submits that the proposed amendments are being provided 
to correct only informalities in the Specification, and that no new matter is being added. 

V. Claim Rejections under 35 U.S.C, S112 

In the Office Action mailed May 3, 2005, Claims 2, 8, 1 1 and 17 were rejected under 35 
U.S.C. 1 1 2, second paragraph as being indefinite for failing to particularly point out and distinctly 
claim the subject matter that applicant regards as the invention. Accordingly, Applicant has 
amended Claims 2, 8, 1 1, and 17, as shown above, to clarify the embodiments claimed therein. 
Applicant respectfully submits that the claims as amended comply with the requirements of 35 
U.S.C. 112, and reconsideration thereof is respectfully requested. 

VI. Claim Rejections under 35 U.S.C, S102(bl 

In the Office Action mailed May 3, 2005, Claims 1 -3, 5, 7-8, 1 0-1 2,14,1 6-1 7, 1 9 and 20 were 
rejected under 35 U.S.C. 102(b)as being anticipated by Carter (/\/aA? R Carter, "Windows NT 4.0 
MCSE Study Guide, " 1997, ISBN: 0764530879). 

Claim 1 
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Claim 1 has been amended by the current Response to more clearly define the embodiment 
therein. As amended, claim 1 defines: 



f. A system for maintaining security in a distributed computing environment, 
comprising: 

(1) a policy manager, coupled to a network, including 

a database for storing a security policy including a plurality of rules; and 
a policy distributor, coupled to the database, for distributing the plurality of 
rules through the network; 

(2) a security engine located on a client coupled to the network, for storing a set of 
the plurality of rules constituting a local customized security policy received through 
the network from the policy distributor, and for enforcing the local customized 
security policy with respect to an application at the client; and 

(3) an application, coupled to the security engine. 

Claim 1 , as currently amended, defines a system for maintaining security, wherein a security 
engine located on a client is responsible for enforcing a local customized security policy for that 
client, which in turn is distributed and received through the network from a policy distributor. 
Furthermore, Claim 1 has been amended to clarify that the enforcement of the local security policy 
is with respect to an application at the client. 

The advantages of the embodiment defined by Claim 1 include that it provides a local 
customized security policy to each client, which can then be used to control security for that 
particular client at the application level of the client. Each client on the network may be provided with 
its own customizable security policy that is different from other clients, so that the system provides 
greater control over the security process. Since the local security policy is enforced at the 
client/application level rather than by making network calls to the server, this feature can also lessen 
network traffic. Furthermore, a more modularform of security is possible because each application 
has the ability to evaluate access privileges upon every request for access to a particular 
information. 

Carter discloses a Windows NT security policy. In particular, Carter appears to disclose a 
system policy file which restricts a user's ability to perform certain tasks on a Windows NT 
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computer on a network to which a user has logged onto (Carter page 350). When a user logs on 
to the domain, the system policy is retrieved from the Net logon share on the domain controller 
and the user is authenticated (Page 351). 

Applicant respectfully submits that Carter fails to disclose the distribution of a custom and 
local security policy to each client. Instead, Carter appears to teach that an administrator must 
create a system policy file and save it in the Netlogon share on each domain controller. That 
system policy file is then retrieved by the operating system when a user logs on to the domain. 
However, Carter does not appear to disclose or suggest a local security policy which is 
customizable to each client and which is distributed to that client, as defined by Claim 1 . 

Furthermore, in Carter, since the system policy file appears to be stored in the Netlogon 
share on each domain controller and retrieved and enforced by the server, the policy evaluation 
appears to be at the server level, rather than locally at the client. However in the embodiment 
defined by Claim 1 , the point of enforcement is at the client's level. 

Furthermore, as disclosed by Carter, the system policy is a collection of user, group and 
computer policies and this system policy can be applied to all users, groups and computers, or to 
individual users groups and computers. (Pages 350-51 ). Thus, Applicant respectfully submits that 
Carter appears to disclose a single, large system policy file which can be applied individually to 
various users or computers. However, in the embodiment defined by Claim 1 , as currently 
amended, the security policy is customized to each client, and is then distributed to the client and 
enforced at that client's level. 

In view of the above comments, Applicant respectfully submits that Claim 1 , as amended, 
is neither anticipated by, nor obvious in view of the cited references, and reconsideration thereof is 
respectfully requested. 

Claims 7, 10, 16, 19 and 20 

Claims 7,10,16,19 and 20 have been amended similarly to Claim 1 to more clearly define 
the embodiments therein. Applicant respectfully submits that Claims 7, 10, 16, 19 and 20 as 
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amended, are likewise neither anticipated by, nor obvious in view of the cited references, and 
reconsideration thereof is respectfully requested. 

Claims 2, 3, 5, 8, 11, 12, 14 and 17 

Claims 2, 3, 5, 8, 11. 12, 14 and 17 are not addressed separately, but it is respectfully 
submitted that these claims are allowable as depending from an allowable independent claim, and 
further in view of the comments provided above. Applicant respectfully submits that Claims 2, 3, 
5, 8, 11, 12, 14 and 17 are similarly neither anticipated by, nor obvious in view of the cited 
references, and reconsideration thereof is respectfully requested. 

It is also submitted that these claims also add their own limitations which render them 
patentable in their own right. Applicant respectfully reserves the right to argue these limitations 
should it become necessary in the future. 

Vll. Claim Rejections under 35 U.S.C. §1 03(a) 

In the Office Action mailed May 3, 2005, Claims 4, 9, 13 and 18 were rejected under 35 
U.S.C. 1 03(a) as being unpatentable over Carter in view of the Microsoft Press reference {Microsoft 
Press Computer Dictionary, Editior), ISBN: 1 57231 446XA, 1997). Claims 6 and 15 were 
rejected under 35 U.S.C. 103(a) as being unpatentable over Carter. 

Claims 4, 6, 9, 1 3, 1 5 and 1 8 are not addressed separately, but it is respectfully submitted 
that these claims are allowable as depending from an allowable independent claim, and further in 
view of the comments provided above. Applicant respectfully submits that Claims 4, 6, 9, 1 3, 1 5 
and 18 are similarly neither anticipated by, nor obvious in view of the cited references, and 
reconsideration thereof is respectfully requested. 

It is also submitted that these claims also add their own limitations which render them 
patentable in their own right. Applicant respectfully reserves the right to argue these limitations 
should it become necessary in the future. 
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VIII. Conclusion 

In view of the above amendments and remarks, it is respectfully submitted that all of the 
claims now pending in the subject patent application should be allowable, and reconsideration 
thereof is respectfully requested. The Examiner is respectfully requested to telephone the 
undersigned if he can assist in any way in expediting issuance of a patent. 

Enclosed is a PETITION FOR EXTENSION OF TIME UNDER 37 C.F.R. § 1.136 for 
extending the time to respond up to and including November 3, 2005. 

The Commissioner is authorized to charge any underpayment or credit any overpayment 
to Deposit Account No. 06-1 325 for any matter in connection with this response, including any fee 
for extension of time, which may be required. 



Customer No.: 23910 

FLIESLER MEYER LLP 

Four Embarcadero Center, Fourth Floor 

San Francisco, California 94111-4156 

Telephone: (415) 362-3800 



Respectfully submitted, 
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